PECB ISO-IEC-27001-Lead-Auditor Exam Questions (Updated 2023) 100% Real Question Answers
Pass PECB ISO-IEC-27001-Lead-Auditor Exam Quickly With Exam4Tests
To prepare for the PECB ISO-IEC-27001-Lead-Auditor certification exam, candidates are recommended to attend a training course provided by PECB or one of its accredited training partners. They can also use study materials such as books, online courses, and practice exams to enhance their knowledge and skills. After passing the certification exam, candidates will be awarded the PECB Certified ISO/IEC 27001 Lead Auditor certificate, which is valid for three years and can be renewed through continuing education and professional development activities.
NEW QUESTION # 23
Information or data that are classified as ______ do not require labeling.
- A. Confidential
- B. Internal
- C. Highly Confidential
- D. Public
Answer: D
NEW QUESTION # 24
Backup media is kept in the same secure area as the servers. What risk may the organisation be exposed to?
- A. After a fire, the information systems cannot be restored
- B. Responsibility for the backups is not defined well
- C. Unauthorised persons will have access to both the servers and backups
- D. After a server crash, it will take extra time to bring it back up again
Answer: A
NEW QUESTION # 25
The following are the guidelines to protect your password, except:
- A. For easy recall, use the same password for company and personal accounts
- B. Change a temporary password on first log-on
- C. Don't use the same password for various company system security access
- D. Do not share passwords with anyone
Answer: A,D
NEW QUESTION # 26
Access Control System, CCTV and security guards are form of:
- A. Access Control
- B. Physical Security
- C. Environment Security
- D. Compliance
Answer: B
NEW QUESTION # 27
A hacker gains access to a web server and reads the credit card numbers stored on that server. Which security principle is violated?
- A. Integrity
- B. Authenticity
- C. Availability
- D. Confidentiality
Answer: D
NEW QUESTION # 28
An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR.
- A. False
- B. True
Answer: B
NEW QUESTION # 29
What is an example of a human threat?
- A. fire
- B. thunderstrom
- C. phishing
- D. a lightning strike
Answer: C
NEW QUESTION # 30
The following are definitions of Information, except:
- A. can lead to understanding and decrease in uncertainty
- B. mature and measurable data
- C. accurate and timely data
- D. specific and organized data for a purpose
Answer: B
NEW QUESTION # 31
Which of the following factors does NOT contribute to the value of data for an organisation?
- A. The content of data
- B. The importance of data for processes
- C. The indispensability of data
- D. The correctness of data
Answer: A
NEW QUESTION # 32
What controls can you do to protect sensitive data in your computer when you go out for lunch?
- A. You turn off the monitor
- B. You are confident to leave your computer screen as is since a password protected screensaver is installed and it is set to activate after 10 minutes of inactivity
- C. You activate your favorite screen-saver
- D. You lock your computer by pressing Windows+L or CTRL-ALT-DELETE and then click "Lock Computer".
Answer: D
NEW QUESTION # 33
In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:
- A. Make the information security incident details known to all employees
- B. Preserve evidence if necessary
- C. Report suspected or known incidents upon discovery through the Servicedesk
- D. Cooperate with investigative personnel during investigation if needed
Answer: A
NEW QUESTION # 34
Which is not a requirement of HR prior to hiring?
- A. Applicant must complete pre-employment documentation requirements
- B. Must successfully pass Background Investigation
- C. Undergo background verification
- D. Must undergo Awareness training on information security.
Answer: D
NEW QUESTION # 35
What is the goal of classification of information?
- A. To create a manual about how to handle mobile devices
- B. Applying labels making the information easier to recognize
- C. Structuring information according to its sensitivity
Answer: C
NEW QUESTION # 36
Four types of Data Classification (Choose two)
- A. Unrestricted Data, Highly Confidential Data
- B. Restricted Data, Confidential Data
- C. Project Data, Highly Confidential Data
- D. Financial Data, Highly Confidential Data
Answer: A,B
NEW QUESTION # 37
__________ is a software used or created by hackers to disrupt computer operation, gather sensitive information, or gain access to private computer systems.
- A. Malware
- B. Operating System
- C. Trojan
- D. Virus
Answer: A
NEW QUESTION # 38
You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password.
What kind of threat is this?
- A. Social Engineering
- B. Organizational threat
- C. Arason
- D. Natural threat
Answer: A
NEW QUESTION # 39
What is the security management term for establishing whether someone's identity is correct?
- A. Verification
- B. Authorisation
- C. Identification
- D. Authentication
Answer: D
NEW QUESTION # 40
We can leave laptops during weekdays or weekends in locked bins.
- A. True
- B. False
Answer: B
NEW QUESTION # 41
Which of the following is a possible event that can have a disruptive effect on the reliability of information?
- A. Risk
- B. Vulnerability
- C. Threat
- D. Dependency
Answer: C
NEW QUESTION # 42
In acceptable use of Information Assets, which is the best practice?
- A. Playing any computer games during office hours
- B. Interfering with or denying service to any user other than the employee's host
- C. Accessing phone or network transmissions, including wireless or wifi transmissions
- D. Access to information and communication systems are provided for business purpose only
Answer: D
NEW QUESTION # 43
Which is the glue that ties the triad together
- A. Process
- B. People
- C. Technology
- D. Collaboration
Answer: A
NEW QUESTION # 44
What is social engineering?
- A. Creating a situation wherein a third party gains confidential information from you
- B. The organization planning an activity for welfare of the neighborhood
- C. A group planning for a social activity in the organization
Answer: A
NEW QUESTION # 45
......
PECB ISO-IEC-27001-Lead-Auditor certification is intended for professionals who want to become certified lead auditors for ISMS or improve their auditing skills in the field of information security. PECB Certified ISO/IEC 27001 Lead Auditor exam certification exam covers a wide range of topics related to ISMS auditing, including the principles and practices of information security management, the ISO/IEC 27001 standard, and the auditing process. Candidates who pass the exam will be able to conduct effective audits of ISMS and provide recommendations for improvement.
Real PECB ISO-IEC-27001-Lead-Auditor Exam Questions [Updated 2023]: https://torrentpdf.exam4tests.com/ISO-IEC-27001-Lead-Auditor-pdf-braindumps.html